100 matches found
PT-2019-20087
Name of the Vulnerable Software and Affected Versions blueman affected versions not specified Description The issue concerns a problem with polkit authorization checks in blueman. Previously, any user with access to the D-Bus system bus could trigger certain network configuration logic in blueman...
Security update for blueman (moderate)
openSUSE Security Update: Security update for blueman Announcement ID: openSUSE-SU-2019:1246-1 Rating: moderate References: 1083066 Affected Products: openSUSE Backports SLE-15 An update that contains security fixes can now be installed. Description: This update for blueman fixes the following...
OPENSUSE-SU-2019:1050-1 Security update for blueman
This update for blueman fixes the following issues: The following security issue was addressed: - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authenticatio...
PT-2019-20085
Name of the Vulnerable Software and Affected Versions blueman affected versions not specified Description The issue concerns a problem with polkit authorization checks in blueman. Previously, any user with access to the D-Bus system bus could trigger certain network configuration logic in blueman...
Security update for blueman (moderate)
openSUSE Security Update: Security update for blueman Announcement ID: openSUSE-SU-2019:1050-1 Rating: moderate References: 1083066 Affected Products: openSUSE Backports SLE-15 An update that contains security fixes can now be installed. Description: This update for blueman fixes the following...
blueman - set_dhcp_handler D-Bus Privilege Escalation Exploit
Exploit for linux platform in category local exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'blueman setdhcphandler D-Bus Privilege Escalation', 'Description' = %q This module attempts...
blueman set_dhcp_handler D-Bus Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'blueman setdhcphandler D-Bus Privilege Escalation', 'Description' = %q This module attempts to gain root privileges by exploiting a Python code...
blueman - set_dhcp_handler D-Bus Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'blueman setdhcphandler D-Bus Privilege Escalation', 'Description' = %q This module attempts to gain root privileges by exploiting a Python code...
Updated blueman packages fix security vulnerability
Flawed polkit authorization checks in blueman allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication boo1083066...
MGASA-2018-0414 Updated blueman packages fix security vulnerability
Flawed polkit authorization checks in blueman allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication boo1083066...
PT-2018-19285
Name of the Vulnerable Software and Affected Versions blueman affected versions not specified Description The issue is related to flawed polkit authorization checks in blueman, allowing any user with access to the D-Bus system bus to trigger certain network configuration logic without...
Security update for blueman (moderate)
This update for blueman fixes the following issues: The following security issue was addressed: - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authenticatio...
openSUSE: Security Advisory for blueman (openSUSE-SU-2018:2290-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : blueman (openSUSE-2018-855)
This update for blueman fixes the following issues : The following security issue was addressed : - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without...
[slackware-security] blueman
New blueman packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/blueman-2.0.6-i586-1slack14.2.txz: Upgraded. This update fixes an issue where blueman-mechanism did not enforce the polkit action...
Slackware 14.2 / current : blueman (SSA:2018-213-01)
New blueman packages are available for Slackware 14.2 and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-213-01. The text itself is copyright C Slackware Linux, Inc...
blueman: privilege escalation
A local privilege escalation vulnerability has been found in the Network::EnableNetwork method of blueman. An unsanitized string is received over DBUS into the dhcphandler parameter and passed to eval, thus allowing arbitrary command execution with the privileges of the user running blueman...
DEBIAN-CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
